iptables to only allow traffic from other boxes
other bug fixes